EUVD-2026-108344

Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic to crash the service permanently by sending structurally valid JSON that does not match the handler's expected type...

CVE-2026-112332

The Motor.NET library (versions before 0.19.0 ) is vulnerable to a Denial of Service (DoS) attack due to an uncaught exception in JsonNetDeserializer.Deserialize. A remote attacker who can publish messages to a consumed queue or topic can send structurally valid JSON that does not match the expec...

CVE-2026-112331 Motor.NET < 0.19.0 Kafka Denial of Service via Structured CloudEvent Mapping

Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanently by sending a single crafted record. By setting the content-type header to application/cloudevents+json and omitting require...

EUVD-2026-108343

Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanently by sending a single crafted record. By setting the content-type header to application/cloudevents+json and omitting require...

CVE-2026-112331

Motor.NET versions prior to 0.19.0 are vulnerable to a Denial of Service (DoS) attack due to improper handling of structured CloudEvent mappings. An attacker capable of producing records to a consumed topic can trigger a permanent crash-loop by sending a single crafted record with a content-type ...

CVE-2026-112330 Motor.NET < 0.19.0 RabbitMQ Denial of Service via CloudEvents Headers

Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a consumed queue to crash the service permanently by sending a message with crafted cloudEvents headers. Attackers can supply an invalid cloudEvents:motorversion, a single...

EUVD-2026-108342

Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a consumed queue to crash the service permanently by sending a message with crafted cloudEvents headers. Attackers can supply an invalid cloudEvents:motorversion, a single...

CVE-2026-112330

The Motor.NET library (versions before 0.19.0 ) is vulnerable to a Denial of Service (DoS) attack via RabbitMQ when processing messages with crafted CloudEvents headers . A remote attacker capable of publishing to a consumed queue can provide an invalid cloudEvents:motorversion, a single double-q...